mirror of
https://github.com/ElvishArtisan/rivendell.git
synced 2026-01-13 08:05:55 +01:00
2021-04-17 Fred Gleason <fredg@paravelsystems.com>
* Escaped all SQL identifiers in 'lib/'. * Replaced " with ' delimiters in all SQL literal strings in 'lib/'. Signed-off-by: Fred Gleason <fredg@paravelsystems.com>
This commit is contained in:
@@ -67,15 +67,15 @@ bool RDReport::ExportNprSoundEx(const QString &filename,const QDate &startdate,
|
||||
// Roll Up Records
|
||||
//
|
||||
sql=QString("select ")+
|
||||
"EVENT_DATETIME,"+ // 00
|
||||
"LENGTH,"+ // 01
|
||||
"TITLE,"+ // 02
|
||||
"ARTIST,"+ // 03
|
||||
"ALBUM,"+ // 04
|
||||
"LABEL "+ // 05
|
||||
"from ELR_LINES where "+
|
||||
"SERVICE_NAME=\""+RDEscapeString(mixtable)+"\" "+
|
||||
"order by EVENT_DATETIME";
|
||||
"`EVENT_DATETIME`,"+ // 00
|
||||
"`LENGTH`,"+ // 01
|
||||
"`TITLE`,"+ // 02
|
||||
"`ARTIST`,"+ // 03
|
||||
"`ALBUM`,"+ // 04
|
||||
"`LABEL` "+ // 05
|
||||
"from `ELR_LINES` where "+
|
||||
"`SERVICE_NAME`='"+RDEscapeString(mixtable)+"' "+
|
||||
"order by `EVENT_DATETIME`";
|
||||
q=new RDSqlQuery(sql);
|
||||
while(q->next()) {
|
||||
*strm << q->value(0).toDateTime().toString("MM/dd/yyyy hh:mm:ss")+"\t";
|
||||
|
||||
Reference in New Issue
Block a user